SAP NetWeaver Visual Composer suffers from insufficient input validation and output encoding on certain request data, allowing an unauthenticated attacker to craft malicious links that execute scripts in the victim's browser within the application's context. This vulnerability impacts confidentiality and integrity to a low degree but does not affect availability.